diff --git a/install-external-deps.sh b/install-external-deps.sh index c376c85..e8eb6f3 100755 --- a/install-external-deps.sh +++ b/install-external-deps.sh @@ -8,8 +8,12 @@ RUNTIME_ENV_DIR="$(dirname "$RUNTIME_ENV_FILE")" LOCAL_ENV_FILE="$SCRIPT_DIR/.external-runtime.env" LOCAL_BOOTSTRAP_ARTIFACT_DIR="${ANYSCAN_LOCAL_BOOTSTRAP_ARTIFACT_DIR:-$REPO_ROOT/.cache/anyscan/bootstrap-artifacts}" -VULNSCANNER_REPO_URL="${ANYSCAN_VULNSCANNER_REPO_URL:-https://github.com/Lorikazzzz/VulnScanner-zmap-alternative.git}" -VULNSCANNER_REPO_DIR="${ANYSCAN_VULNSCANNER_REPO_DIR:-$REPO_ROOT/VulnScanner-zmap-alternative-}" +# The scanner C source lives in AnyVM-Tech/anyscan-engine-c — a fork of the +# upstream Lorikazzzz/VulnScanner-zmap-alternative- repo that AnyVM-Tech can +# carry patches against (AF_XDP integration, PF_RING ZC dispatch fix, etc.). +# See plans/2026-04-27-portscan-afxdp-plan-v1.md §9.1. +VULNSCANNER_REPO_URL="${ANYSCAN_VULNSCANNER_REPO_URL:-https://github.com/AnyVM-Tech/anyscan-engine-c.git}" +VULNSCANNER_REPO_DIR="${ANYSCAN_VULNSCANNER_REPO_DIR:-$REPO_ROOT/anyscan-engine-c}" VULNSCANNER_BIN_PATH="$VULNSCANNER_REPO_DIR/scanner" VULNSCANNER_INSTALLED_BIN="/opt/anyscan/bin/scanner" diff --git a/package-worker-bundle.sh b/package-worker-bundle.sh index 6bd655d..14a8690 100755 --- a/package-worker-bundle.sh +++ b/package-worker-bundle.sh @@ -517,7 +517,13 @@ main() { strip_binary "$bundle_root/bin/agentd" if [ -z "$SCANNER_SOURCE_BIN" ]; then - if [ -x "$SCRIPT_DIR/../../VulnScanner-zmap-alternative-/scanner" ]; then + # Prefer the AnyVM-Tech fork of the scanner C source (anyscan-engine-c) + # which carries the AF_XDP integration patches; fall back to the legacy + # upstream-clone path and the system-installed binary. + # See plans/2026-04-27-portscan-afxdp-plan-v1.md §9.1. + if [ -x "$SCRIPT_DIR/../../anyscan-engine-c/scanner" ]; then + SCANNER_SOURCE_BIN="$SCRIPT_DIR/../../anyscan-engine-c/scanner" + elif [ -x "$SCRIPT_DIR/../../VulnScanner-zmap-alternative-/scanner" ]; then SCANNER_SOURCE_BIN="$SCRIPT_DIR/../../VulnScanner-zmap-alternative-/scanner" elif [ -x /opt/anyscan/bin/scanner ]; then SCANNER_SOURCE_BIN="/opt/anyscan/bin/scanner"